llm-monitoring-dashboard

SUSPICIOUS. The skill is largely aligned with its stated monitoring purpose and keeps most data local, but it relies on a third-party CLI installed via curl|bash and can forward provider API keys to that CLI in live mode. This looks more like elevated supply-chain and trust risk than confirmed malware.